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Listing of the Claims: 

The following is a complete listing of all the claims in the application, with 
an indication of the status of each: 

1-50. (Canceled) 

5 1 . (Currently amended) A method of transferring personal information^ 
including medical informatimi , of a plurality of users from a first database in 
which said personal information is identifiable with particular users to a second 
database associated with a web server in which said personal information is 
de-identified, said method comprising the steps: 

uploading to said second database associated with said web server 
de-identified personal informatio n, including medical information of said users 
from said first database; 

uploading to said second database from a third database associated with a 
registration authority server anonymous IDs for each of said users; and 

indexing said de-identified personal informatio n, including medical 
information, of said users in said second database by anonymous ID without 
providing indexing to said first dataha.se 

52. (Currently amended) A method of authenticating an anonymous user of a 
World- Wide- Web (WWW) site residing on a web server, said user requiring a 
web ID and a password to log on to said WWW site, said method comprising the 
steps: 

verifying the true identity of said anonymous user on a registration 
authority server; 

creating said web ID on said web serve r, said web server including de- 
identified personal info rmation including medical information of said user : and 

creating said password on a certificate authority server; 

wherein said registration authority server, said web server, and said 
certificat e authority server are operated separately from each other to preserver 
anonymity of said user, whereby the only party which knows the true identity, web 
ID and password of the user is the user. 
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53. (Previously presented) The method according to claim 52 wherein on 
subsequent log ins to the WWW site by said user said password is authenticated 
by said certificate authority server and said Web ID is authenticated by said Web 
server. 



